CVE-2026-103505— AWS EFS CSI Driver Mount Option Injection via mounttargetipmap
Quick assessment
Affected
AWS aws-efs-csi-driver
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
AWS EFS CSI 驱动程序（aws-efs-csi-driver）v3.1.0 至 v3.4.2 版本中的卷处理组件存在参数分隔符未正确中和的漏洞。该漏洞可能允许拥有 PersistentVolume 创建权限的远程认证用户，通过在 卷属性中注入逗号分隔的值，来插入任意的挂载选项。 为修复此问题，建议用户升级至 v3.5.0 或更高版本。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-103505
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
AWS EFS CSI Driver Mount Option Injection via mounttargetipmap
Source: CVE Program / CVE List V5
Vulnerability Description
Improper neutralization of argument delimiters in the volume handling component in AWS EFS CSI Driver (aws-efs-csi-driver) v3.1.0 through v3.4.2 might allow remote authenticated users with PersistentVolume creation permissions to inject arbitrary mount options via comma-separated values in the mounttargetipmap volumeAttribute.
To remediate this issue, users should upgrade to version v3.5.0 or later.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
参数注入或修改
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| AWS | aws-efs-csi-driver | 3.1.0 ~ 3.4.2 | - |
|
II. Public POCs for CVE-2026-103505
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-103505
请登录查看更多情报信息。
Other References for CVE-2026-103505 (2)
-
https://aws.amazon.com/security/security-bulletins/2026-120-aws/ vendor-advisory
IV. Related Vulnerabilities
Same vendor: AWS
-
CVE-2026-100308
GluonTS arbitrary command execution during model deserializa -
CVE-2026-96883
Type confusion in AWS pgcollection allows remote code execut -
CVE-2026-94450
Potential denial of service when configured to send Retry pa -
CVE-2026-92943
Improper validation of certificate with host mismatch in AWS -
CVE-2026-86831
Improper validation of pod identifier uniqueness in aws-netw
Same weakness: CWE-88
-
CVE-2026-102904
JupyterLab: Argument injection in JupyterLab extension unins -
CVE-2026-100714
Froxlor before 2.3.12 Command Injection via letsencryptchall -
CVE-2026-100570
OpenClaw before 2026.8.1 Remote Code Execution via CLOUDSDK_ -
CVE-2026-100561
OpenClaw before 2026.8.1 Authentication Bypass via Exec Wrap -
CVE-2026-100369
CliInvoke: Argument Injection in Extensibility Runner Factor
V. Comments for CVE-2026-103505
No comments yet